Network as a Sensor with Cisco Stealthwatch Cloud

Name: Network as a Sensor with Cisco Stealthwatch Cloud
Rating: 4.4 (16 reviews)

Learn Cisco Stealthwatch Cloud from scratch. Understand the installation, configuration and setup of this solution

Created bySecureWire .

Last updated 6/2020

English

What you'll learn

Learn Cisco Stealthwatch Cloud from Scratch
Understand various components of Cisco Stealthwatch Cloud
Learn about the installation and setup of Cisco Stealthwatch Cloud
Understand the standard operating procedures for investigating alerts and observations
Learn about Encrypted Traffic Analytics (ETA) in Cisco Stealthwatch Cloud
Private Network Monitoring (PNM) with Stealthwatch Cloud
Public Cloud Monitoring (PCM) with Stealthwatch CLoud - Microsoft Azure & Amazon AWS
This course is NOT on Stealthwatch Enterprise

Course content

10 sections • 30 lectures • 4h 27m total length

Course Agenda4:32
In this lecture we will review the agenda and outline of the course and what is included in this course
Stealthwatch Cloud - Business Case5:15
In this lecture we will review the requirements and business case for Cisco Stealthwatch Cloud. Before diving into the details of Cisco Stealthwatch Cloud, we would understand why we would need Stealthwatch Cloud and why businesses are deploying Stealthwatch Cloud

What is Cisco Stealthwatch Cloud and How it Works12:58
Understand what Cisco Stealthwatch Cloud is and how it works. Understand the underlying framework
Cisco Stealthwatch Cloud v/s Cisco Stealthwatch Enterprise v/s SIEM9:38
Components of Cisco Stealthwatch Cloud & Deployment Planning7:56
Understand the different components of Cisco Stealthwatch Cloud and review the different deployment considerations while setting up and rolling out Cisco Stealthwatch Cloud
Console Overview of Cisco Stealthwatch Cloud9:48
Review the Cisco Stealthwatch Cloud web console. Understand the different options and dashboard elements of Cisco Stealthwatch Cloud

Sensor Installation23:30
Learn about the installation process of the Cisco Stealthwatch Cloud sensor on the network in VMware ESX and perform the initial setup
Sensor Pairing & Verification9:11
Perform the pairing of the installed sensor with the Stealthwatch Cloud console and verify the installation and data feed
Setting up Networks for Monitoring5:14
Setup the private networks in Cisco Stealthwatch Cloud console for monitoring
Initial Traffic Verification & Walkthrough6:10
Verify traffic flow on the web console and review the Cisco Stealthwatch Cloud web console

Configure Devices for Flow Logging - Cisco ASA12:58
Understand how to setup devices on the network (Cisco ASA Firewall) for flow logging and verify the setup
Configure Other Devices for Flow Logging12:32
Understand setting up other devices on the network for flow based logging to Cisco Stealthwatch Cloud
Changing Port Settings on Cisco ASA for special logging3:12
Change standard flow ports on the devices and review the setup
Quiz on Configuration and Setup

Configuring Alerts and Alert Settings11:35
Learn about setting up alerts and tweaking settings to setup optimal alerts in Cisco Stealthwatch Cloud
Trigger Sample Alerts Through NMAP Scanning5:51
Simulate a Reconnaissance event by running a simple NMAP scan to trigger some alerts in Cisco Stealthwatch Cloud so that these can be investigated
Responding to Alerts7:34
Learn about the Standard Operating Procedure in responding to Cisco Stealthwatch Cloud Alerts
Investigating and Responding to Observations13:26
Learn about the standard operating procedure of investigating and responding to observations in Cisco Stealthwatch Cloud

ETA Overview7:45
Understand the concepts on Encrypted Traffic Analytics (ETA) and the requirements for the implementation in Cisco Stealthwatch Cloud
ETA Lab Design Review1:54
Review the lab architecture that will be used to setup ETA
ETA Configuration and Setup16:52
Learn about setting up Enhanced Netflow on Cisco CSR 1000v Router and integrating with Stealthwatch Cloud
ETA Setup Verification6:22
Verify and validate the configuration and setup for ETA. Review the encrypted flow events and understand the workflow
Quiz 3

Alert and Event Integration6:22
Explore the various options available for alerts and event integration in Cisco Stealthwatch Cloud
Reports6:30
Explore the various reports available in Cisco Stealthwatch Cloud and the information they provide out of the box
Roles3:00
Review the Roles option available in Cisco Stealthwatch Cloud. Understand the significance and importance of roles option
Basic Troubleshooting4:09
Review some of the basic troubleshooting steps while tackling problems with Cisco Stealthwatch Cloud

Requirements

Good Knowledge of Networking
Basic Understanding of Cloud Technology
Basic Understanding of Information Security principles

Description

Learn about the Installation, Configuration and the Management of Cisco Stealthwatch Cloud, to monitor networks from advanced threats. Understand the whole paradigm shift in IT to the cloud, monitoring insider threats, monitoring public cloud networks for security issues and policy violations. Cisco Stealthwatch Cloud provides insight and visibility into the network communications like never before, through a cloud delivery model. Please note that this course does NOT include Cisco Stealthwatch Enterprise.

This course includes detailed information around the specifications and use cases for Cisco Stealthwatch Cloud, Installation of the ONA sensors for private network monitoring, monitoring of public cloud network monitoring such as Amazon AWS and Microsoft Azure, Setting up alerts, Reviewing the standard operating procedures for responding and reviewing alerts and observations, review the Encrypted Traffic Analytics (ETA) component and setup on Cisco Stealthwatch Cloud

Who this course is for:

Anyone who wants to learn about Cisco Stealthwatch Cloud
Network Administrators and Security Analysts

Network as a Sensor with Cisco Stealthwatch Cloud

What you'll learn

Explore related topics

Course content

Introduction2 lectures • 10min

Overview of Stealthwatch Cloud4 lectures • 40min

Virtual Deployment Considerations & Lab Architecture2 lectures • 9min

Installation & Setup4 lectures • 44min

Setting up Devices for Flow Logging3 lectures • 29min

Public Cloud Monitoring2 lectures • 44min

Alerts & Observations4 lectures • 38min

Encrypted Traffic Analytics (ETA)4 lectures • 33min

Integration & Reporting with Basic Troubleshooting4 lectures • 20min

Conclusion1 lecture • 1min

Requirements

Description

Who this course is for: